255 matches found
Duqu Analysis and Detection Tool by NSS Labs
Duqu Analysis and Detection Tool by NSS Labs NSS Labs has built a new, free tool that detects known and newly created Duqu drivers that have infiltrated systems, thus allowing security experts to further analyze the "functionality, capabilities and ultimate purpose of DuQu.". The Tool is availabl...
NetworkMiner 1.1 - Network Forensic Analysis Tool (NFAT) Released
NetworkMiner 1.1 - Network Forensic Analysis Tool NFAT Released NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting...
NetworkMiner 1.1 - Network Forensic Analysis Tool (NFAT) Released
NetworkMiner 1.1 - Network Forensic Analysis Tool NFAT Released NetworkMiner is a Network Forensic Analysis Tool NFAT for Windows. NetworkMiner can be used as a passive network sniffer/packet capturing tool in order to detect operating systems, sessions, hostnames, open ports etc. without putting...
Debian DSA-2303-2 : linux-2.6 - privilege escalation/denial of service/information leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2011-1020 Kees Cook discovered an issue in the /proc filesystem that allows loc...
DSA-2303-1 linux-2.6 - several issues
Bulletin has no description...
Xplico v0.6.1 - Network Forensic Analysis Tool (NFAT)
"The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn't a network protocol analyzer. Xplico is...
Watcher 1.4.1 - latest version download
"Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...
Sawmill Detection
Sawmill, a log analysis tool from Flowerfire Inc., is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50430; scriptversion"1.6"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Sawmill...
Xplico 0.5.7 Cross Site Scripting
Xplico v0.5.7 add.ctp Remote XSS Vulnerability Title: Xplico v0.5.7 add.ctp Remote XSS Vulnerability Type: Remote Impact: Cross-Site Scripting Release Date: 02.07.2010 Release mode: Coordinated release Summary ======= The goal of Xplico is extract from an internet traffic capture the applications...
Cross-site scripting vulnerability in apricot.php from LovPop.net
Overview apricot.php from LovPop.net contains a cross-site scripting vulnerability. apricot.php from LovPop.net is a software to analyze web access logs. apricot.php contains a cross-site scripting vulnerability. Note that future releases and maintenance of apricot.php ended on March 19, 2009...
Wireshark多个协议处理模块远程拒绝服务漏洞
BUGTRAQ ID: 24662 CVECAN ID: CVE-2007-3389,CVE-2007-3390,CVE-2007-3391,CVE-2007-3392,CVE-2007-3393 Wireshark以前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的多个协议解析模块实现上存在漏洞，远程攻击者可能利用此漏洞导致控制用户机器。 如果处理了HTTP响应中的分块编码、特制iSeries抓包文件、畸形DCP...
security flaw
The bgpupdateprint function in tcpdump 3.x does not properly handle a -1 return value from the decodeprefix4 function, which allows remote attackers to cause a denial of service infinite loop via a crafted BGP packet...
Ettercap network security analysis tool format string vulnerability
Format string bug on cursesmsg call...
Buffer over/underflows in ssldump prior to 0.9b3
http://www.rtfm.com/ssldump The ssldump team has discovered a number of memory errors in old versions of ssldump. BACKGROUND ssldump is an SSLv3/TLS network protocol analyzer. If provided with the appropriate keying material, it will also decrypt the connections and display the application data...
